feat: wire official-bots to external tournament server

Adds the env vars and secret structure needed for the official-bots pod
to connect to the external tournament server at 141.37.123.132:8086.

- TOURNAMENT_SERVER_URL and TOURNAMENT_BOT_DIFFICULTY added as plain env
  vars to the nowchess-official-bots rollout
- TOURNAMENT_BOT_TOKEN wired from a new ncs-tournament-secret SealedSecret
- Placeholder SealedSecret files added for staging, eu-central-1-prod, and
  htwg-1-prod — must be sealed with a real bot token before deploying

TOURNAMENT_ID is intentionally omitted; it is per-tournament and supplied
at runtime via POST /api/bots/official/join-tournament.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
LQ63
2026-06-17 02:04:26 +02:00
parent f043443efd
commit 6cef31d142
5 changed files with 59 additions and 0 deletions
+2
View File
@@ -11,10 +11,12 @@ resources:
- nowchess/staging/ncs-jwt-keys.yaml
- nowchess/staging/ncs-db-secrets.yaml
- nowchess/staging/ncs-internal-secret.yaml
- nowchess/staging/ncs-tournament-secret.yaml
- nowchess/eu-central-1-prod/ghcr-pull-secret.yaml
- nowchess/eu-central-1-prod/ncs-jwt-keys.yaml
- nowchess/eu-central-1-prod/ncs-db-secrets.yaml
- nowchess/eu-central-1-prod/ncs-internal-secret.yaml
- nowchess/eu-central-1-prod/ncs-tournament-secret.yaml
- nowchess/kargo/ghcr-image-secret.yaml
- nowchess/kargo/github-image-secret.yaml
- nowchess/kargo/remotek6-certs.yaml